Skip to contentRails Rails-html-sanitizer vulnerabilities
- rails rails-html-sanitizerrails-html-sanitizer: Possible XSS via shared scrubber state in concurrent callsCVE-2026-128069Fix available4.7 Medium
- rails rails-html-sanitizerrails-html-sanitizer: Possible regular expression denial of service with certain configurationsCVE-2026-128068Fix available5.3 Medium
- rails rails-html-sanitizerrails-html-sanitizer: Possible XSS vulnerability with certain configurationsCVE-2026-73648Fix available5.1 Medium
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0CVE-2024-53985Fix available2.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0CVE-2024-53987Fix available2.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0CVE-2024-53986Fix available2.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0CVE-2024-53988Fix available2.3 Low
- rails rails-html-sanitizer, rubyonrails rails html sanitizers +1 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0CVE-2024-53989Fix available2.3 Low
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 morerails-html-sanitizer contains an incomplete fix for an XSS vulnerabilityCVE-2022-23520Fix available6.1 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 morePossible XSS vulnerability with certain configurations of rails-html-sanitizerCVE-2022-23519Fix available7.2 High
- loofah project loofah, rails rails-html-sanitizer, debian linux +1 more +3 moreImproper neutralization of data URIs allows XSS in rails-html-sanitizerCVE-2022-23518Fix available6.1 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 moreInefficient Regular Expression Complexity in rails-html-sanitizerCVE-2022-23517Fix available7.5 High
- rails rails-html-sanitizer, rubyonrails html sanitizer +1 morerails-html-sanitizer Cross-site Scripting vulnerabilityCVE-2018-3741Fix available6.1 Medium